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w m « 

[oooi] fc&mn. vim-vffvT'ttvWT—^T?^ (mmmi&) kmu fv? 

Palladiumfr®, LaGrandeff®, Enhanced Virus Protection^fg) 0 

Mm<D7tt^&&mi$fox\^mmm\wt\^&z> 0 ^tittiBM, i&t 
mm, NTTy s —^m(D±^]}y L ^m^^y^-x^ 0 z.tu-zm-%mw j $>^$\* 
wtmtt i nzMm (Dmu-7v±iy-y-xfoz 0 %\ (D^^^^t^ 

tdtfvfr^mtfto^mmm&tt^x&zfab, m^—p&m g ^^ns 

^#W;$Ciifcl :Cetin Kaya Koc "High-Speed RSA Implementation Version 2.0" RSA 
Data Security, Inc. 1994(ftp://ftp.rsasecurity.com/pub/pdfs/tr2Ol.pd0 
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[0003] *&w<d g m-i. mmmm&wh. &*^o x -t^v^rnm ar^ibmr- 

[0004] ±.i&<D g WSr^i-Sfcfe fcl, #3§PJ? fit, *£*^Ufc*$R&^^y T#l 

tt^^^riKrtr ^ — tittofrbbhte* mem^i?**, m&m*^*. rtim 
^it^<Dmwc(Dm^mm^^ir^b^Wf.b^±^T^ti±^-^h^o 

dr^y^-^— F&m^TZ±*~VTj-}si?x*&ffi%.Z>bbi>fc. JtEW^' 

[0005] fltriE-fe^y^-^— KK^^-tt, tfris-fe^y^.i/^^§r-fe^h-r^^l^^ 
£T£<054&tU*aHi*fU t&IE«fc*^^^o<Di:#<D^(z:-fe^y^.^e~KS:y-fe 
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mz.'j?fz<tbimm&&z>zb&4km^ mmm*v>*&®Mwtfeu sfo=i^ 
ft^tc&btey^^h • w^rt o^-^te^ H-et&v ^u-c, mf— ?&m& 

ir^T-^n^iHcte, 3D**rWz.mmvX%M^ mllB^^ffl^fi, ituiE^ 

feTf-zsmxfoZo 

[0006] ^mm<D±^T'^ti±^\t, w,m&k±*~v^m-m<7>r.mi%£i&&m^^ 
r—^^^^mrr^t\^^xm^x\^ 0 
±^(D±^T-^u±ry^m^^tix\^mxmmm<Dic^—y(D±t^mm 

Mitmrn, mnn^t^mm, ^yh^mmm. m^<Ds^mKML-x, mttz 
yim (Dmm ■7*riy*7j*&7'ti±~,-y-(D±xMn-rz>z.b tz.£<o, ttfoirz>z.bftx%z> 0 

[0007] ^AlEttE^^T, -t*~])^mm&^m*bX^<b, mAmr—^m^ 

mz(D&mx.z>£?\zu m<Dhb®zmfc&m&i-z>£?\z.-tz > z.biz.ft%m<o zjh 

A-.mAmv*— *&w%WiWmz.$o\,^x&frnz>b%i^ ±^^jw^itvb-r 
o0m£ft%mit<D&x\ Mf^i^v\ ^<Dz.bizM @ lt, mxmz^^v 
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[0008] < :/n-fesrif©fl|jEjfe > 

[0009] <-fe^T-7 B nir^if(D(^g|5«fife> 

4Mbits)-e&^ 0 rtt^mov^tt, H"C»u<ittwr5. 

[0010] (±*~T-^vi±vVft&M)&<Dlffl<DmW) 

mi<DCPUlOOPl\a-Z, (IS: Instruction Register) 143, ^JJ9*— * 

■^^(MD: Memory Data Register) 144, ~fxi If 7 J* • io (PC : Program 
Counter) 145, F-^"^7^K-^7!>^(FC:F-operand Counter) 146, T-^T^'y 
K-^^^(TC:T-operand Counter) 147^^^c$tvTV^ 0 rfrkttx ^^e!J200 
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^di/^-^^^CPC) 145<Dfomz£Q^ ±**rV 2003&>£>lft^l^;** (IS) 14 
3{£, IH3(a) td^i-^— e5/h(64tVh)(D#^^^ttl$^o Z.(D<fr^iZ£<Q > 
HI3 (a) (DMF^MTO^— /VK-ejt^$tLfcTKV^— K (EI3 (b) \ZJ&^ 
T, F-*-^7^K-#£^^146, T-^7^K-^7^^147(CTHV^^^$f l/ 
. ^£^2002)^7^!;^— ^-V^(MD) 144^^— ^^^tU^tV/cD, 
.ixv^i44 (MD) rttO^— ^^^^ey200^##ii^ttfc«9-r^o 

coon] ^ft^it^Ti*. m3<DL7j-j>\?Kmfe£frtimMft, f-^-^k-*^ 
^i46 j ^t-^-^vk-^^^i47^. -r^y^vh(i-ro^p)$tv-c. ^-^>-k 

anm^^xx^o 

mffl^H^ (ALU: Arithmetic and Logic Unit) 164ft, — ^^mWiMW, 
, ^mmW-^^n^W-^h^). fl^(MPY:MultiPlY unit) 162ft. 64tVh 

PFl/v^ (Program Status Flag) 148ft, -fo^(Dmmz£<9±vh&ihZ>4&yh<D'7 
y^Xh'O, IH4-l(a), 04-2(b)^$^TV^^-^— K^OPSW(DJS^$ 
thX\,^h<Dtf~tiyh£thZ>o t^3-K^©PSW (Program Status Word) CON, Z, V 
, Cft, ^fl^fl, A (Negative) , i?o (Zero) , :7n— (oVerflow) , =3p-f y ( 

Carry) Sr^l/TV ^ 0 

^|!UBW^(RO~RF) 110ft. -^fflCO^^^T-ffiVN^^tflfflCOl/^ 
^-CfcSo -^fflW^**£fflV^^lfr^ft, |El3(a)cDMFXftMm[l|3(b) 
CDl/^^ii:^it^L.T, FXftT^"^>-KcO^— /^K^lx^^^^^-f 
§o^^T-^^(B0, B1)141, 142ft, ^3^fpCO^^m^bT48<lx^ 

_h^co^^<D»j^#lxv?^^co^tgft. f^lXft, m3^^b/c^co^— 7 
yhi:l2l4-l, EI4-2(D^=i-K^(^=i-K^)^#m^tt/cV\ m4-l(a),&. 
TJ*IH4-2 (b) ft^-^3— K^T*fe<9, EI4-2 (c) ft, ^"^=r— K*t<Z>^f— /l^K^fC 
$Lm£tiX\,^nZ^<Dm.WX&>V)^ 04-2 (d) ft. K^coibf^co^co^lBco 



WO 2005/045789 



6 



PCT/JP2004/016589 



®.WX3b*), 04-2 (e)f4, 04-2 (c), (d)<Z>*T^LTVv5r£<DMJ£f&^T-fc5 0 
t^-K^OOP, SOP, MF, MT, L, F, T, S<D#^te, 03(a) (b)O^^ 

#^©»f^«^ ibf^^tcfB^tbTv^o mm*. fit^(DftMx\ mz.t$. sft 

tti^MM^ ADDfifcftllSMMK SUBte^ift^\ BITOfcVM&atlJMK MOV 
tt^BMI^ JMPttS**^*)*^ LINK{*f-^W— 7^3" BRtePSW 

El 1 t^UTV ^T^^^Sr-fey hUTV >5 0 Rim*— z^^^Tif o-z^o^ 

[0012] £i±mwi,tcW)&te. mn<Dm>m^?*7v±vV(DM}&bmm<Dh<D~?&z 0 z 

[ooi3] <m&mmzMirzmf£> 

un^m-r^mm^ ±^r-^±^<Dm^mz.mmvx^mmmx 

[0014] mf-fnmffiik) 

tt~v^mm<DT>b<><DBMz.mT—ttmi&<DP5±x&z 0 hi mas 
wr, m'T—pte, ^w&a&^v (^j^ifROM) xm^thtz.m^^ (ko— kf 

:Key register) 130(C^^$ttTV>-5 o •W*** r 130fc:W\ #^~lf(£>#i|x.fc?RSA 

©SMSfttT*— ^ (i024if yh) 3d5##ii*tvTV ^o^^^^ey— 
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[0015] B!20|i#^IeIj^^^V^T, |itVh#^^^(KC: Key-bit reference Counter 
)l52tel023^ibcnrc\ mik'rfV^hirZo r<D^Vh#M#^*i52tf>f*iW 

&fabvx^ m^-fz^j&xmmftn^Mir^bte^-psmxhZc 

[0016] HKD^x^h • Ui/X? (DO— D2 : Digest register) 120te\ 64lf X 3<£>lx^ 

£-f5o -tL^Jh«fc*^^^h-l/^^rt^r2 n J (n=l, 2, •••)© 
3*gc(2, 3, 5, 7, 11, 13, 17, 19, 23, -)lORJfeU *h,k<Z>»£ fr3M&&«T* 

h . — 1 6o\fyhKMf^ir^it^±^mxh^t^mm^^m^o 



WO 2005/045789 



8 



PCT/JP2004/016589 



bf£* DWv ? ^120(D^:160tVb^l6fcVh'fol0yn-/^^E^ 
[0017] (•fedF-a.y^-f*— K) 

[0018] w&mn&m<oim<DWr&bwiu m£&n<Dm*pxmm$tiz><fr^*%&& 

AjfefT*— KSrWai*— K^ir^y^ -^e— ra^^UTl ^ if K"C 
jfeff tiVSrfe^F-aLy^-f^^'US^^CSFU^^: Security Flag register) 149~e^ 

IHlOSFWv ? ^149tC«SF3, SF2, SF1, SF0<D4fcVHS&£#\ H|®4£5<£> 
teSF0<We&3 o 
(1)SF0=0:#jIH— K 
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(2)SF0=l:SNB i e— K 

femmm*op$i&kmv,iz.ti:z>o 04-1 (a), ig4-2(b)<D^=— m-c, mm 

(DM\Z. [SF= 1] tM^^h^^^(D^i^-\Z^m^ SIE, KCJ, ADO, SCMP 
, SSB, MLS, MDK, MLD, MLL, MLH, MLP<Dfrfti^X&Z> 0 &:J8 % MLS, 
MDK, MLD, MLL, MLH, MLPtDifa^m, ^#*£;^£*^1-5fc#><D5fc^TK 

[0019] SF0=lSrK^S#^(S4-l(a) :SIG)i3u i&i* Hgil^ KC = 03FF( = 102 
3d), 0000— 000F#ife(£>1024fcVKr—^ =0000- • • '0001\Z.Wt^-^> o SIG 

y-r^^h-l^v?^120^"2' , i:^^$tlT. 2 K modNyO^«ec^#$tV 

[0020] ^«»©3ft^TH!tffii-afffj|c»*©«Kttiii9fr±, OT<D^^y<D_h#:64# 

(1) 0000— 000F 16#ifi(l024t>h7 f — ^) 

(2) 0010— 001F 16#i£(1024fcVKr— 2) 

(3) 0020— 002F 16#^(1024tV^— 

(4) 0030— 003F 16#ife(1024tVh7 f — ^) 

tHM&£# 1024tT v h<DM&te (1) 0000-000F#i£tf> 1 6%fm^&M£ftZ> 0 
fh^^m^2048lf^bO#^fi(l) (2)0000-001F(D32#Jfe^^$tb^ o ff 
m&%z$:-Kmm£ J £tl\,^b$te, (3) (4)0020-003F^S^£i2r5^<D^-C£r 
5 C &*3 % SF0=l^|&£;ftTSF0=0{;iftofcfc£Ti3, Wil^MOV^^(|gl4- 

i (a) m>x±.m<D±Mmimm<Dft&*m&m'<&tt 0 

[0021] ^LT, ^^^j^Ti-^*T% gp*>, m*'?^*KC&~gtibtl:Z>$.X\ SF0&V 
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-tyh-TZ^ (SIE) ZmfttSltZ^ktfX^fo ^ (134-1 (a)#flg) 0 ^KoV^tt 

[0022] <M&WiW) 

KSA<imm/^MZ.&tf^i?#;vm& tt. D K modN (D : ?4i>^h - 

K-.m, N:#3fe©«E»)SrtHIE*r5w^C*>5. 
D K modN&— itDg^^^T^^ilt^ -fe^y^W-hfiM^UV^OO, 

i,tz-t*c~yTjmmxhz>o ^^^vT^mm^mm-r^ D K modN<Dtf-^££> 

-TVm (Binary Method) <7)T/l^yXAT^S«#^T*fc*9, f^lXte, Mx.li±.m 
<^##fF^l (2.3 The Binary Method (p.lO-p.ll)) Z^M^WzW ^JlR 
(DAn^V 0000— 000F#J&<D F^^T^^o 
[0023] ®5<£>:7ti— ^-Y— M^^T, 3m8f£;t (S312) K:<&^&, 1-^SFO, l^A, 10 
23^KC<D3o<D^ffii?]^l^(D^(SIG^)-e=fToTV^ 0 ^LT. 

. 16^VhX 10<O16tVh^^^<^l^«l^fe^r^^/N— K^Tlft^l&ftJl- 
6 0 SFO=l^o^:fet{i^^^C^ffl$n^^•L^^tgL^V^(DT^ ^v 5 ^ 

^h-w^^i20rt(O7 f — ^J€f^"e#^v\ 

(DmWzy^^Xhmtt ^irZW% fYmm^mir^m (Desmedt-Odlyzko 
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£X,{*!t>fr<DjjmX2, 3, 5, 7, 11, 13, -?£¥<D/b&ti;mmz.tc\,^%m-%t)- 

&'b£ftm%CA, B, C, -<DmM=A P B Q C R -tL-Xmms. A, B, C, —<Dm£tHL 

U, V, W, — dS*KF^JR^$*T/T*3tvM, 

M K modN - (A P B Q C R - •-) K modN=U P V Q W R - • -modN 

tvxKzmmftib'rth&f&^smxhZo 

Ut^ZL(D^mti s 2, 3, 5, 7, 11, 13, -^if©gt^^x^M©^/^ 

±£tm^&msxmw<?>^*y*&mi. m%m&mzhbXRx&\oxBm 

[0024] %}%Mk<D&b, A 2 modN^r^i-^ (S314) 0 SDdtt, A= l-Cfc5o 

oft, AXDmodN£r#f^-r5(S316) 0 £*T<£>J;5t-Kc(#&C't><D % ffcfr 
(KC) 152Xm^£tltc{(Lm<D\? s>h) ©ffi^J;oT2il90^Sri:5 c 

Bfcl] 

if Kc = l then D = D 

if Kc = 0 then D = l 

156-ef£W5o H4-2(b)©^--^=— K^-CH:, MDK^ffc^ m*V^?<Dy* 

?y*>hb±&<Dn&'&&^b&mmzn?'fri?x3bz> 0 
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X D K modN(Dff^|fP^-eS)So 
[0025] Z.tl&mK.<DM£ft. EP^> fi^7'»'^KC152^^^§^-e(S318T*YES) , H 
#£^KC152£^>y^R.-C(S320h 2o<Dmodfr^L (S314. S316)2rfr5o 

^frbikilZ>Z.t&X»%Z> (SIE^) „ 
[0026] _B£(Dmodff-f| (S314. S316)tf>gB#te, mW-fo^Z* fot1rZ>mmiX7 L v7tf 

,v—7~tz>mmnt£ox\^ 0 modNiDifij:, mn^h^mwt^^K 
v~mwtmttiz$twmm%&<>x£m<Dmwbim<Dmwxmftir% 0 *e>=r* 

])— 5^<DT/l^yX-M£oV^te, 0<Wf^JC^l (3.8 Montgomery's Method p.46 



[0027] (*ri/=iyv—mn<Dmm) 




mm modR N 



- N 



-biB^^^R, R*, N*f3, V^^N^^:^^fc*UJO^^Nf^|^^^ 

4\?yhmzm7££HX\,^Z><DX\ R, R*. N*teTfB£&5„ 

• R = 2 1024 = 1 00000 000 

(R©f- ^tVhS^1025tVhte^> o ) 
•R* =R 2 modN=2 2048 modN 

(modN££37&^ R*<D^— *fcVhftkn024fc>^TT*&3 o ) 
•NN*= y R-l^J£i~6J:9{-N*SrffWi-^o y teffilctf>gifcT*fc5 0 
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[0028] ±7&<D&&#Lit>z>itib<Dm&t±. mm-fm&&m\zv*»£><D'T*. uT<vmw$>z> 

o 

(01) AR*£j£#>5o 

Max. 2048eVh-efc5 o 

(02) AR*N*«r3ft«>3£, 2048tVhT"b^— ^n— *f^(D-C\ AR*modR£ 
3fe^fe5(T^LtVhOttm) o _h^<D1024tVh^T^ o 

(03) (02) XN*W4 lftlM$mttft^:2048lfyh-C*>5 o 

(04) (03)modR (TteLfcVH^J*ffi)o ii¥#<Z>1024fc"Vb£irO5„ 

(05) (04) x N&sfca&So mit^raft^:2048fcVh-efc§ o 

(06) (01) + (05) %M#>Z> 0 ^JP#^«ft^:2049tVh-efcS o 

(07) (06) (T4fcLfcVh£>O<0|&*) o T¥^O1024tVh^T^ 0 

(08) (07)-N£5fc#>5o rtt^X^i-^ 0 jE^^J^LTil^bTfT9o 

(09) (08) XDSr^«)S(rr-eKc^«-rS)o 5ftJI©tt*tt, 1024+160=11 
84fcVh-efc§o 

(10) (09)N*£^&3£2048fcVK-e i M-— 7n- r5<£>^ (09)modR£r 
$fc^&5(TfcLfcVh<^ffi) 0 T¥^1024tVh^$l«9mi-o 

(11) (10) XN*&5fc*65 0 Jft#ife£tt*;k2048tfyM?ifc5o 

(12) (H)modR^feS(T'f4Lt>b(0^m)o T^^>1024tVh^«9t±ii-o 

(13) (12) XN&5£#>5o ^^f*l:^:2048fcVh-efe'5o 

(14) (09) + (13) &5fc&5 0 iPlM$mtt**:2049lfyh-e*>S o 

(15) (14)/R^^feS(T^Ltf5/hC0^)o T4^©1024lfyh^TSo 

(16) (15)-N«r^«)So mmt. HA*J^bTag^i-^ 0 
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[0029] _h&0>5fcS\ 04-1 (a) , 04-2 (b) l^L^^— K*©1*H*-CfT5»#«\ 0 
6 (a) ^1~ 0 06 (a) ^^$tl/fclE^lC5fef*06 (b) J^£*VCl ^ 0 
06(a)T^£*VCVV5£5f;i. _L5£<D^j!lte, 04-l*5«J;t^04-2^^$tb 

[0030] <ICJj—F^<D!fem> 

-fizMVT, mAm-cm^tir^t'C^.^ti^o 07(a) teSiftfflVMb^Tl^ 
maEIC^— K3103r^l/TV^ o m ; &fflV^^)tLTV^^mliEfflIC^~K310}i. IC# 
-K310^A<^li^— ^^^ii^tbTV^o ^-fe-^M«9^^. ^^y=i^320(c 

^i-^^^^y^ux©»)i-5o f&fiEfflic;fr-R3ioa^A<^^- 

07(b) ^^i-fe^T-^n-fey^ia^AyfcIC^— K315<D|§^te\ S^ft 
^fg^^i-^OT% IC#— K315^*f^5/ir— it&m&J*. ICX— K315|*re 

l\> IC^7— K315^)^^y=i^320^^TWT<^O{* > ^v^/l^fc ^t?fc«9 
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[0031] m llir^T • yu±y<p<DMj&M&&'t-7vy?m"e$>Z>o 
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—mtr$ktb\z. mmm^**. mmm*>v^*. Rumt&y^^h-^j^ 

^0(Db^<DMz.^^)y-^ • ^e- R£y -fey Y'T^b^Wib't^^^T • 

[4] m^m3Kmm.<D-t^T'^±^z^^x, 



WO 2005/045789 



17 



PCT/JP2004/016589 



[6] W^:^l-5<7)V ^^^'IB^Oir^T-^air^^m^A/fcIC^— Ko 
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